Skip to content
Kyria
Security

Security is built into every connection

Kyria handles private messaging and sensitive financial details. Here is exactly what protects that data - in plain language, without vague marketing claims.

Nine layers, one account

Every layer that stands between your data and the outside

01

HTTPS everywhere

All traffic between your browser and Kyria is encrypted in transit.

02

Two-factor authentication

Enforced for every account on the platform - not optional, and not limited to administrators.

03

Encryption at rest

Sensitive fields, including business bank details, are encrypted in the database - not stored in plain text.

04

Role-based access control

Every action is governed by your role and your business relationships. There is no default access to data outside your own business and its active connections.

05

Tenant isolation

One business cannot see another business's data through the platform. Access to every conversation, record, and file is checked against your actual relationships, not just your login.

06

Full audit logging

Account and security-relevant events - logins, permission changes, verification decisions - are logged for accountability.

07

Malware scanning on uploads

Files shared through the platform are scanned before they become available to the recipient.

08

Double-approval on sensitive changes

Changes to a business's bank details require approval from two separate Business Admins before they take effect.

09

Suspension and moderation controls

Accounts and businesses that violate platform rules can be restricted or suspended, and every connection can be blocked or reported.

A note on compliance claims

We would rather be precise than impressive. Kyria is designed with privacy and security controls including enforced 2FA, encryption of sensitive fields, and full audit logging - but we do not claim certifications such as SOC 2, ISO 27001, or a formal GDPR compliance attestation unless and until they have actually been obtained. If a specific compliance requirement matters for your business, get in touch and we'll tell you plainly where things stand.

Have a specific security question?